handbook/tools/Others/phishing/Domain/Unicode-Domain.md
2024-08-31 01:07:22 +02:00

8 lines
590 B
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

Unicode characters can look the same to the naked eye but actually, have a different web address. Some letters in the Roman alphabet, used by the majority of modern languages, are the same shape as letters in Greek, Cyrillic, and other alphabets, so its easy for an attacker to launch a domain name that replaces some ASCII characters with Unicode characters.
For example, you could swap a normal T for a Greek Tau: τ, the user would see the almost identical T symbol but the punycode behind this, read by the computer, is actually xn--5xa.
- Limitation with modern browser